Behavioral task
behavioral1
Sample
d107d82235725c459e96be664540b6e7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d107d82235725c459e96be664540b6e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d107d82235725c459e96be664540b6e7_JaffaCakes118
-
Size
67KB
-
MD5
d107d82235725c459e96be664540b6e7
-
SHA1
aae5c05f871ed2ba415a2b29c5ab5e52e4f1a1ed
-
SHA256
4afd57c91b801c001b6cbf56a3c3c4e571d3ce90289b72702325186784a5dc5c
-
SHA512
216eca50a076ef393af39055f1f5acd4676940fc4b7452ffd1c51f45c61c206162ec378c20cd494af3fdbd25b5a43d991ff0aba45776713a97d05f9bf5f8cc25
-
SSDEEP
1536:n87wc1aGNC0klI7CPpIFa606vs2sGVrd/:87wc1aOCo7CxINU2sYJ/
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d107d82235725c459e96be664540b6e7_JaffaCakes118
Files
-
d107d82235725c459e96be664540b6e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE